Information Security Engineer (WAF Focused)

HOK Consulting - Technical Recruitment Consultancy; Sheffield; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

A leading consultancy in technical recruitment is looking for an Information Security Engineer with strong WAF experience. This hybrid role, primarily based in Sheffield, involves enhancing web application security through custom WAF rules and detailed log analysis, contributing to the security posture of various platforms.

Qualifications

• Experience with SOC / CSIRT / Threat Hunting or Security Forensics.
• Knowledge of OWASP Top 10.
• Hands-on experience with 3+ WAF vendors.

Responsibilities

• Develop, test, and implement custom WAF rules and tuning strategies.
• Conduct efficacy testing and integrate results into CI/CD pipelines.
• Perform detailed log analysis to identify and mitigate false positives.

Skills

WAF experience

Threat Detection

Log Analysis

Tools

AWS

Akamai

F5

GCP

Job description

Information Security Engineer (WAF Focused)

Information Security Engineer (WAF Focused)

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from HOK Consulting - Technical Recruitment Consultancy

I introduce talented IT Professionals to exciting contract opportunities within Banking & Financial Services

Job Title: Information Security Engineer – WAF & Threat Detection

Location: Hybrid (x3 days from Sheffield)

Visa: No sponsorship available and No PSW visa

We're seeking a skilled Information Secuirty Engineer with strong WAF experience to enhance the efficacy and security posture of our Web Application Firewalls across multiple platforms. The role involves crafting custom WAF rules, performing in-depth log analysis, and driving tuning and optimization to reduce false positives and ensure robust protection.

Key Responsibilities:

• Develop, test, and implement custom WAF rules and tuning strategies
• Conduct efficacy testing and integrate results into CI/CD pipelines
• Perform detailed log analysis to identify and mitigate false positives
• Provide SME support on Web & API attack methods, evasions, and mitigations
• Support DevSecOps teams in automation and security pipeline integration
• Stay updated with evolving web threats and deliver security recommendations

Ideal Background:

• SOC / CSIRT / Threat Hunting or Security Forensics experience
• AppSec / Ethical Hacking expertise with knowledge of OWASP Top 10
• Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP)
• Security Engineering or DevSecOps experience is a plus

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  Computer and Network Security, IT Services and IT Consulting, and IT System Custom Software Development

Referrals increase your chances of interviewing at HOK Consulting - Technical Recruitment Consultancy by 2x

Sign in to set job alerts for “Information Security Engineer” roles.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.